Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-4834

In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.

Published

2023-10-16T09:15:11.830

Last Modified

2024-11-21T08:36:04.223

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

Type: Primary
CWE-269

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	helmholz	myrex24	≤ 2.14.2	Yes
Application	helmholz	myrex24.virtual	≤ 2.14.2	Yes
Application	mbconnectline	mbconnect24	≤ 2.14.2	Yes
Application	mbconnectline	mymbconnect24	≤ 2.14.2	Yes

References

https://cert.vde.com/en/advisories/VDE-2023-041 Third Party Advisory ([email protected])
https://cert.vde.com/en/advisories/VDE-2023-043 Third Party Advisory ([email protected])
https://cert.vde.com/en/advisories/VDE-2023-041 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert.vde.com/en/advisories/VDE-2023-043 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)